MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d778ecb3738036fe02b0cc768417d7f4101d2c22111ae3c4cddc6489802b2d4b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d778ecb3738036fe02b0cc768417d7f4101d2c22111ae3c4cddc6489802b2d4b
SHA3-384 hash:	0f437749067e65eb8e9987bf5ded14dab6672107eec26b2e3008f1f3e366797b50dac2783910ac11a1b6d33ec5956fa2
SHA1 hash:	bb10c74d333bcbd56fcbfc8e6da7ab6c574e759e
MD5 hash:	d6cce7e3a4bf64dcfa7d48a55530d4b4
humanhash:	snake-red-dakota-delaware
File name:	password. qq (1).apk
Download:	download sample
File size:	431'618 bytes
First seen:	2026-03-31 16:03:23 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	12288:Cu523X/T4MHn1Bn/wdcvFRD7ecL1tMsS+:CuYDHT4q7D7B1o+
TLSH	T12D94236BFE52D683F12679BC5104AC42519A662DFDF4A07F0C0822A7DEFADD84F4294C
TrID	60.6% (.APK) Android Package (27000/1/5) 30.3% (.JAR) Java Archive (13500/1/2) 8.9% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	BastianHein
Tags:	apk screenlocker signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

119

Origin country :

CL

Vendor Threat Intelligence

ACCE

Gathering data

ClamAV Detected

Detection(s):

Andr.Ransomware.Slocker-6803814-0

Alert

Create hunting rule

Andr.Ransomware.Slocker-6803848-0

Alert

Create hunting rule

Andr.Ransomware.Slocker-6804563-0

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

android base64 crypto evasive invalid-signature lockscreen persistence ransomware signed slocker

Link:

https://www.filescan.io/uploads/69cbf07fe2df9aa488c02a72/reports/25761f67-e55c-4323-8866-855efae8967e/overview

Incinerator

Gathering data

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/d778ecb3738036fe02b0cc768417d7f4101d2c22111ae3c4cddc6489802b2d4b

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2026-03-31T14:05:00Z UTC

Last seen:

2026-03-31T14:59:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/d778ecb3738036fe02b0cc768417d7f4101d2c22111ae3c4cddc6489802b2d4b/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/d778ecb3738036fe02b0cc768417d7f4101d2c22111ae3c4cddc6489802b2d4b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d778ecb3738036fe02b0cc768417d7f4101d2c22111ae3c4cddc6489802b2d4b/

ReversingLabs TitaniumCloud Android.Ransomware.Congur

Threat name:

Android.Ransomware.Congur

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-31 16:04:24 UTC

File Type:

Binary (Archive)

Extracted files:

26

AV detection:

12 of 22 (54.55%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=254ozm3tqa3p4avqzr3iif6x6qib2lbccenohrgn3rsitablfvfq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

android

Link:

https://tria.ge/reports/260331-th2jaaby6q/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.80

Link:

https://yomi.yoroi.company/submissions/d778ecb3738036fe02b0cc768417d7f4101d2c22111ae3c4cddc6489802b2d4b